Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
File: ejvLQKHIyPn3WNzeHCkHk42GhS8.mft (raw, json)
Hash identifier: VZKHyZVOFOde9X1YjDKtkyDUTP56U5U/pae5UQg58IM=
Subject key identifier: E4:F1:90:23:C9:09:C5:BF:84:25:5C:10:D6:5D:A1:2D:7A:4B:7D:2C
Authority key identifier: 7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F
Certificate issuer: /CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f
Certificate serial: 0199FEEBA82AE766F2A321A0294429E00907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
Manifest number: 08FB
Signing time: Mon 20 Oct 2025 00:01:20 +0000
Manifest this update: Mon 20 Oct 2025 00:01:20 +0000
Manifest next update: Tue 21 Oct 2025 00:01:20 +0000
Files and hashes: 1: ejvLQKHIyPn3WNzeHCkHk42GhS8.crl (hash: MzzU2/74PLsuz/XTRQByvxueas/MrosMm1CNinnaAkQ=)
2: npO31UQ6MgQb_KXFRuB5cseCGq0.roa (hash: g4JN4BNjztb4rOd5YFRTGak1PKL3E9KOaxMHM6ZlfJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:a8:2a:e7:66:f2:a3:21:a0:29:44:29:e0:09:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f
Validity
Not Before: Oct 20 00:01:20 2025 GMT
Not After : Oct 21 00:01:20 2025 GMT
Subject: CN=e4f19023c909c5bf84255c10d65da12d7a4b7d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:fc:c4:23:86:de:e3:71:fa:d9:9d:ce:21:
b4:fc:a0:83:29:f8:66:fe:ed:c6:90:e8:b5:18:94:
c5:da:b2:60:35:a9:2b:1d:a4:8d:33:0e:1f:25:a7:
5e:a0:87:4d:b7:6f:40:c7:d1:04:4c:4c:78:8d:f5:
a2:47:b4:8f:b1:6a:70:5b:c0:76:a8:e2:b6:59:ca:
3d:24:35:32:aa:1a:6b:66:ad:4b:00:87:ef:23:01:
df:cc:ad:f9:3b:fc:0c:aa:62:5b:90:cf:64:d1:6d:
6d:e1:08:25:2f:34:37:1f:5b:4a:a4:7c:e7:19:30:
00:94:ab:43:a8:8e:d0:be:d6:a9:d2:c9:53:5b:aa:
ad:d2:b6:67:f1:cf:52:3b:96:d4:7d:d2:d9:eb:7a:
73:97:82:88:bb:54:4b:23:57:2e:24:7c:30:99:0b:
bb:e2:24:f3:68:bc:c9:25:92:a1:32:d7:f0:ae:41:
c0:56:44:34:21:73:c3:ef:33:83:b4:6f:f9:81:bc:
89:36:ec:4f:99:c5:5c:c5:36:d8:55:ae:fd:25:b5:
da:64:fd:c7:21:2c:c5:3d:31:31:ca:ec:10:d9:86:
29:15:ff:2e:72:ac:f4:b4:79:83:43:37:2d:86:c2:
9c:f1:68:11:04:07:66:21:97:53:fd:35:c6:a7:31:
2d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F1:90:23:C9:09:C5:BF:84:25:5C:10:D6:5D:A1:2D:7A:4B:7D:2C
X509v3 Authority Key Identifier:
keyid:7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:dc:c6:55:f1:dc:69:bb:6d:a9:23:f7:96:76:d7:2e:08:75:
59:12:b4:41:4d:f2:9b:94:2d:56:88:8d:49:e9:e9:4c:2a:80:
a7:dc:3c:de:57:25:e9:98:bb:72:a9:86:b9:15:24:29:17:81:
22:99:4c:53:9e:f3:bc:f7:64:44:bb:98:1c:53:9a:e4:fa:40:
3b:6e:e5:76:56:5f:34:91:98:70:6c:67:d2:39:b6:8f:8f:c6:
fc:73:2c:7b:c5:6e:b0:00:51:27:75:19:96:76:64:d9:75:dd:
c4:6b:90:9a:2e:b7:6b:17:00:ee:aa:0a:1b:bb:e1:9b:33:0e:
2a:58:4e:51:95:b4:4b:18:b3:29:1e:be:ef:b5:66:78:d4:65:
17:9c:9b:aa:a8:09:5a:f5:bf:36:44:01:1c:eb:c1:bb:d0:2a:
70:5f:60:53:2b:19:f0:b1:1c:3f:fd:32:13:58:14:d5:27:e6:
c8:4e:af:13:bd:9e:1b:bb:54:e6:cf:02:26:a6:26:15:02:a1:
3a:f2:c7:6e:6a:a7:68:c7:79:9c:b0:6c:7e:5a:89:2b:3d:43:
f7:9d:84:fc:1d:2b:1f:4f:e0:e8:0a:7f:0f:d1:b1:73:ca:56:
36:cc:fe:20:27:af:05:53:85:2e:de:4e:2f:dd:06:66:43:50:
49:5c:2f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:52 2025 by rpki-client